Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/LBMMzYZxS33pAVLG8_CCXBuNnDk.roa
File: LBMMzYZxS33pAVLG8_CCXBuNnDk.roa (raw, json)
Hash identifier: xHLCevSTtNxhIvM+ve2EbDricfL9hBTSftgXUib++SE=
Subject key identifier: 2C:13:0C:CD:86:71:4B:7D:E9:01:52:C6:F3:F0:82:5C:1B:8D:9C:39
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 18C3
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/LBMMzYZxS33pAVLG8_CCXBuNnDk.roa
Signing time: Wed 24 May 2023 03:54:05 +0000
ROA not before: Wed 24 May 2023 03:54:05 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 134762
IP address blocks: 43.226.144.0/20 maxlen: 20
103.45.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6339 (0x18c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: May 24 03:54:05 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=2C130CCD86714B7DE90152C6F3F0825C1B8D9C39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:1e:fb:13:1e:e7:9e:be:50:33:40:c5:c5:
94:99:9a:3c:93:3b:75:fe:1e:8b:d2:46:94:cf:a8:
7d:7e:d6:13:27:03:83:e9:10:d3:6c:6d:73:eb:a8:
ea:00:8b:6f:e8:98:34:33:7b:cc:8b:b6:92:cf:f3:
08:7d:f7:8a:f2:0b:cd:f1:3b:46:89:a0:21:73:9c:
e7:bc:11:e6:2e:d4:1f:37:72:0c:69:84:5d:19:df:
21:59:2c:97:9f:34:3a:64:76:25:ce:6a:5a:8e:42:
ee:29:58:fa:e5:6c:04:23:91:ba:f0:78:59:75:00:
2b:1a:b9:4f:c0:45:4f:d8:a4:95:65:48:2b:d6:99:
d9:0a:24:10:f8:cd:30:82:26:45:2c:2f:95:f8:3c:
1a:a4:af:e1:f5:d6:93:f0:1f:b9:e2:81:30:ae:c1:
8e:d1:4e:ce:4f:a7:98:e7:42:9d:54:e2:da:d2:30:
12:73:35:f0:ef:89:4d:78:b7:45:4d:c7:10:58:d5:
69:61:f7:72:45:dc:64:22:a8:4b:ce:b4:6a:45:fe:
79:0b:5c:1f:47:1c:97:af:d1:df:c2:5d:f3:61:99:
22:8e:dd:70:18:18:41:5d:12:12:3e:47:d4:8a:c3:
e1:ca:73:50:01:14:bc:ed:bc:d8:84:a1:2b:5b:b4:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:0C:CD:86:71:4B:7D:E9:01:52:C6:F3:F0:82:5C:1B:8D:9C:39
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/LBMMzYZxS33pAVLG8_CCXBuNnDk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.144.0/20
103.45.176.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:d4:68:9d:3e:a3:66:14:07:b3:b7:2a:6b:fa:65:64:97:e6:
cf:f9:83:d6:b2:28:15:f9:bd:8f:cc:26:79:ca:4c:51:ee:30:
06:c2:e9:91:77:00:9a:b0:94:ef:05:8e:de:ef:60:df:1a:99:
68:39:df:4b:39:30:5e:23:d3:b5:63:81:46:7c:54:34:be:ac:
3f:89:9f:3c:5d:46:b9:29:2c:5d:90:e7:59:e6:5f:8e:0c:b1:
d0:4c:ae:0b:61:9d:9e:be:9e:37:ab:f9:ff:f1:d5:10:13:15:
e9:47:bc:52:d6:e0:c3:e6:df:97:7d:19:74:67:29:86:8b:3d:
67:cf:c6:02:c4:63:7e:1a:6c:00:0f:95:1c:e0:3e:27:36:74:
6e:e5:a5:bc:22:ad:ea:78:aa:64:0d:98:f6:00:a2:31:10:da:
29:b7:ca:a6:10:49:91:a5:38:9b:4a:17:be:b4:e0:49:fc:5e:
03:19:83:2e:9e:46:29:53:bc:41:3f:30:c5:b4:61:a0:e5:4e:
c0:e8:cb:f3:df:f7:b6:53:31:e3:db:72:a1:d6:bb:88:c5:95:
7a:f9:3b:25:d3:75:05:80:27:05:bd:ff:94:73:e1:a9:45:be:
33:5c:f7:06:ee:a4:39:25:cb:19:05:1a:9f:5c:38:04:6a:7e:
df:7f:36:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org